Cloud Java APIs should work with a local Cloud SDK with GAE Standard.

[ludoch]

With the following code in my Java Servlet:

   Storage storage = StorageOptions.getDefaultInstance().getService();
   
   
    String bucketName = "rdayalcloudtest"; // Change this to something unique
    Bucket bucket = storage.create(BucketInfo.of(bucketName));

    // Upload a blob to the newly created bucket
    BlobId blobId = BlobId.of(bucketName, "my_blob_name");
    Blob blob = bucket.create(
        "my_blob_name " + request.hashCode(), "a simple blob".getBytes(UTF_8), "text/plain");

I receive the following exception when attempting to test the code locally, using DevAppServer2:

Problem accessing /hello. Reason:

access denied ("java.io.FilePermission" "/Users/ludo/.config/gcloud/active_config" "read")

Caused by:

java.security.AccessControlException: access denied ("java.io.FilePermission" "/Users/ludo/.config/gcloud/active_config" "read")
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
at java.security.AccessController.checkPermission(AccessController.java:884)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
at com.google.appengine.tools.development.devappserver2.DevAppServer2Factory$CustomSecurityManager.checkPermission(DevAppServer2Factory.java:232)
at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
at java.io.FileInputStream.(FileInputStream.java:127)
at com.google.common.io.Files$FileByteSource.openStream(Files.java:125)
at com.google.common.io.Files$FileByteSource.openStream(Files.java:115)
at com.google.common.io.ByteSource$AsCharSource.openStream(ByteSource.java:420)
at com.google.common.io.CharSource.openBufferedStream(CharSource.java:91)
at com.google.common.io.CharSource.readFirstLine(CharSource.java:168)
at com.google.common.io.Files.readFirstLine(Files.java:513)
at com.google.cloud.ServiceOptions.activeGoogleCloudConfig(ServiceOptions.java:354)
at com.google.cloud.ServiceOptions.googleCloudProjectId(ServiceOptions.java:372)
at com.google.cloud.ServiceOptions.getDefaultProject(ServiceOptions.java:348)
at com.google.cloud.ServiceOptions.(ServiceOptions.java:281)
at com.google.cloud.HttpServiceOptions.(HttpServiceOptions.java:179)
at com.google.cloud.storage.StorageOptions.(StorageOptions.java:69)
at com.google.cloud.storage.StorageOptions.(StorageOptions.java:27)
at com.google.cloud.storage.StorageOptions$Builder.build(StorageOptions.java:64)
at com.google.cloud.storage.StorageOptions.getDefaultInstance(StorageOptions.java:99)
at com.example.HelloAppEngine.doGet(HelloAppEngine.java:40)

[lesv]

Is this the right place to report this? I think this is an issue with the Java SDK.

[roku6185]

I'm having the same problem after updating our maven plugin to:

<plugin>
  <groupId>com.google.cloud.tools</groupId>
  <artifactId>appengine-maven-plugin</artifactId>
  <version>1.0.0</version>
</plugin>

I also filed a ticket in the Google Cloud Support Center.

[roku6185]

I solved it by renaming the gcloud directory:

$ mv ~/.config/gcloud ~/.config/gcloud_backup

When I started my java service after this fix everything worked okay.

[ludoch]

Les: GAE standard current sandbox rules (for Java7, lifted on Java8) does not allow a web application to read local file...
The Cloud Java library if running locally should find a way to get the metadata info it needs (project ID, project version etc) in another way than reading local file... (env var, syst prop, GAE API,...)

[lesv]

@GoogleCloudPlatform/cloud-tools-for-java FYI - indirectly affects you.

@ludoch Try adding:

   <dependency>
      <groupId>com.google.api-client</groupId>
      <artifactId>google-api-client-appengine</artifactId>
      <version>1.21.0</version>
    </dependency>

@garrettjonesgoogle @anthmgoogle We need to do this right for GAE Standard as we get gRPC working there.

[garrettjonesgoogle]

Based on the code flow in https://github.com/GoogleCloudPlatform/google-cloud-java/blob/master/google-cloud-core/src/main/java/com/google/cloud/ServiceOptions.java#L336 , if the app engine project id is found in appEngineProjectId(), then googleCloudProjectId() won't be called. Thus, something is going wrong with detecting that this is an app engine use case.

[ludoch]

Maybe this logic has been testing in prod but not in the local GAE Java SDK? Maybe, by making the project id optional in appengine-web.xml the local dev server does not know anymore the project name to use? This might be yet another side effect of changing config in appengine-web.xml?

…

On Fri, Jan 13, 2017 at 2:53 PM, garrettjonesgoogle < ***@***.***> wrote: Based on the code flow in https://github.com/GoogleCloudPlatform/google- cloud-java/blob/master/google-cloud-core/src/main/java/com/ google/cloud/ServiceOptions.java#L336 , if the app engine project id is found in appEngineProjectId(), then googleCloudProjectId() won't be called. Thus, something is going wrong with detecting that this is an app engine use case. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#1500 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAE4zaufwEgtXfgbP1FTSYwFPTgIAjWmks5rSABbgaJpZM4LbPIA> .

[ludoch]

Customer is now escalating the issue with Google support.